|
Message
From: Johnathan Corgan<jcorgan@a...>
Date: Tue Jul 27 03:03:02 CEST 2004
Subject: [oc] Did opencores.org get compromised?
On Monday 26 July 2004 05:35 pm, Johnathan Corgan wrote:> SO, what appears to have happened is the DNS record for opencores.org
> has gotten spoofed somewhere to return the fake 204.228.229.168
> address, but whoever did it didn't do a good enough job as I was able
> to get the real IP address via a recursive look up. (Or something
> like that...still scratching my head on all the DNS protocol traces.)
An update...non-recursive DNS lookup returns the correct IP address; a
recursive one (the default type) returns the spoofed IP address. This
means the authoritative (real) DNS servers are not compromised, but
someone's cache (non-authoritative) is fubared.
-Johnathan
|
 |
Browse
